Transcription of SELinux - Red Hat
{{id}} {{{paragraph}}}
M IR N DUFFYSEL inuxCOLORING BOOKDAN WALSH written byillustrated by"It's raining cats and dogs!"theLEARNas youCOLOR!M IR N DUFFYSEL inuxCOLORING BOOKDAN WALSH written byillustrated by"It's raining cats and dogs!"theLEARNas youCOLOR!CATDOGType EnforcementThe SELinux primary model or enforcement is called type enforcement. Basically this means we define the label on a process based on its type, and the label on a file system object based on its a system where we define types on objects like cats and dogs. A cat and dog are process TYPESCAT_CHOWOBJECT TYPESALLOWCATALLOWDOGPOLICY RULESAs a policy writer, I would say that a dog has permission to eat dog_chow write this rule in policy, as shown have a class of objects that they want to interact with which we callfood. And I want to add types to the food, cat_chow and dog_chow.
CAT DOG Type Enforcement The SELinux primary model or enforcement is called type enforcement. Basically this means we define the label on a process based on its type, and the label on a file system object based on its type. Imagine a system where we define types on objects like cats and dogs.
Domain:
Source:
Link to this page:
Please notify us if you found a problem with this document:
{{id}} {{{paragraph}}}